This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2015-7700 →

DEBIAN-CVE-2015-7700

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vect...

Original description

The description as published by the source.

Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 pngcrush

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.13-0.1"}]}]

Debian:13 pngcrush

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.13-0.1"}]}]

Debian:14 pngcrush

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.13-0.1"}]}]

References

advisory security-tracker.debian.org